Skip to content
OpenAdvisories
High · 8.1 CVE-2024-36263 EUVD-2024-2174GHSA-v74c-qc46-9gg9

Apache Submarine Server Core: SQL injection

Published Jun 12, 2024 · Updated Feb 13, 2025 · Assigned by apache

Description

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Submarine Server Core.

This issue affects Apache Submarine Server Core: all versions.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Submarine Server Core — —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.submarine:submarine-server-core <= 0.8.0 — GHSA-v74c-qc46-9gg9

References